Well, that additional JS File might contain a problem, at least, if it's not part
of a latest default version ... :update\catalog\assets\js\jquery-2.js
exept for the YANDEX - insert, with really should not be part of a default OC anyway ...
it could even be against latest EU Regulations
---

The emails my clients received all came through the Contact Us form in older versions of Opencart (pre 2.0). Pretty sure there's a botnet scanning for Opencart sites and sending these emails. As Daniel suggested in our correspondence, it would be advisable to replace the older captcha with Google reCaptcha to prevent these and all kinds of other bot email scams.

For users of legacy versions I'm offering the attached vQmod for free to help remedy this exploit - it replaces older captcha with Google reCaptcha for Contact Form, Affiliate registration and Customer Registration. To use it you will need to register you site here to obtain keys:

Settings to add your keys can be found in the system > settings > server tab.

Note: The attached software has been preliminarily tested on OC 1.5.6.4 using default theme. If you find a bug please report it here and I'll do my best to fix it in a timely manner. It should work out of the box with most third party themes, however if it doesn't and you need help you can post on the commercial support forums or email me directly for paid support.

Why open developer use a auto version update feature like worldpress so that from admin itself, the latest version of opencart could be updated without taking all pain. Update scripts are not rebust and require much of technical knowledge.

why don't opencart developer use a auto version update feature like wordpress ...

If so, OpenCart Developers would have to strictly follow certain Rules, and Themes like Pavo, Journal,
e.t.c. would have to be re-designed in full, as well as a lot of other Code, to then meet such Requirements.

But OC does not have the Potential, and/or Manpower, to enforce such a policy, and as long as OC is still
a steady developing Project, they have to make sure, not to stay in their own way, but always be free, to
adapt, whatever is required, to latest Knowledge and Techniques.

But for those, looking for a 'final' Solution, to avoid such, OC offers Cloud Services, the latest way of
doing things. But unfortunately, that's no longer a Free Rider Solution, but just another commercial
Thing. And the only way, to somehow succeed, like in every other real Business around this planet.
It just has to be understud and accepted. And if not, Wordpress itself also comes for free, as I'm aware of,
one only has to pay for the Shop Mods ...
Ernie